give auth user file creation permissions